Remove Windows AntiVirus Helper malware for good

Start spreading the news!

Windows AntiVirus Helper is one more rogue security software that belongs to the large FakeVimes virus family. This program is absolutely useless for malware removal, even though it claims to be some reliable antivirus tool. The truth is that this program has been solely designed by hackers with the only intention – to make you waste your funds in their favor. This tutorial will help you to uninstall Windows AntiVirus Helper malware from your computer.

Windows AntiVirus Helper scam

Windows Anti Virus Helper uses fake Microsoft Security Essentials Alerts for getting into your PC. As a matter of fact, these fake MSE warnings typically say that your PC is full of all sorts of viruses, and that the only thing you can do is to download some kind of antivirus utility that will be able to get rid of them. The thing, however, is that this rogue called Windows Anti Virus Helper is absolutely not able to detect real security threats.

Windows AntiVirus Helper will be accompanied by a lot of fake security alerts, warnings and notifications, hot having anything to do with real security status of your PC. This is why all of them must be totally disregarded by you.

Download Combo Cleaner

So, if you’ve actually seen Windows AntiVirus Helper scam on your PC, please do not hurry up to buy it. We recommend that you seek for the correct and proper solution that will help you to remove this malware from your system. For this very purpose you may follow this detailed malware removal guide provided in the rest of this article. On the other hand, if you do have any problems removing this malware from your system, please immediately get in touch with us via all available support channels at this site.

Windows Antivirus Helper removal milestones:

  • In Windows Antivirus Helper click “?” Menu button and click “Register“:
  • Register Windows Antivirus Helper virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown in the image below, then click “Register“:
  • Windows Antivirus Helper product key

    Note! If this product key has been found to be invalid, try one of these keys as well:

    1. 0W000-000B0-00T00-E0001
    2. 0W000-000B0-00T00-E0002
    3. 0W000-000B0-00T00-E0003
    4. 0W000-000B0-00T00-E0021
  • Afer registration download GridinSoft Trojan Killer, install the program, scan your PC with it and remove all infections detected by clicking “Remove selections” button at the end of scan.
  • Download GridinSoft Trojan Killer
  • Restart your computer and repeat scan.

Video that explains how to activate Windows Antivirus Helper virus:

Associated files and registry entries information

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows Antivirus Helper.lnk
%Desktop%\Windows Antivirus Helper.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows Antivirus Helper scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.